Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Integer overflow or wraparound in Microsoft Office Publisher allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Use after free in Windows Hello allows an authorized attacker to elevate privileges locally. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Windows Link Layer Topology Discovery Protocol allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.1 (HIGH)
Use after free in Windows DNS allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Heap-based buffer overflow in Windows Credential Providers allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Windows Biometric Service allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.0 (HIGH)
Missing authorization in Microsoft Office SharePoint allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Untrusted pointer dereference in Windows Group Policy allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.0 (HIGH)
Improper neutralization of special elements used in an sql command ('sql injection') in Microsoft Office SharePoint allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.8 (HIGH)
Out-of-bounds read in Windows Direct Show allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Stack-based buffer overflow in Windows Device Association Service allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.0 (HIGH)
Use after free in Windows Key Distribution Center allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Out-of-bounds read in Windows Win32K allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.0 (HIGH)
Stack-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Virtual Hard Disk (VHD) Miniport Driver allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.0 (HIGH)
Origin validation error in Windows DNS allows an unauthorized attacker to perform spoofing over a network. CVSSv3.1 8.1 (HIGH)
Use after free in Microsoft Office PowerPoint allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Authentication bypass by capture-replay in Windows Kerberos allows an authorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Microsoft Office Word allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Windows Kernel allows an unauthorized attacker to execute code over a network. CVSSv3.1 9.8 (CRITICAL)
Heap-based buffer overflow in Windows Raw Image Extension allows an unauthorized attacker to execute code over a network. CVSSv3.1 8.8 (HIGH)
Heap-based buffer overflow in Windows Spaceport.sys allows an authorized attacker to elevate privileges over a network. CVSSv3.1 8.0 (HIGH)
Missing authorization in Microsoft Exchange Server allows an authorized attacker to elevate privileges over a network. CVSSv3.1 9.1 (CRITICAL)